Sick FX0-GPNT00000 Firmware vulnerabilities

5 CVEs affecting Sick FX0-GPNT00000 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-5246, published 2023-10-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-23444, published 2023-05-12. High severity, CVSS 8.2. EPSS: 1.2% chance of exploitation in the next 30 days. Missing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with Partnumbers 1042193, 1042964, 1044078, 1044072, 1044073, 1044074, 1099830, 1099832, 1127717, 1069070,…
CVE-2019-14753, published 2019-09-24. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. SICK FX0-GPNT00000 and FX0-GENT00000 devices through 3.4.0 have a Buffer Overflow
CVE-2023-23452, published 2023-02-20. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Missing Authentication for Critical Function in SICK FX0-GPNT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to achieve arbitrary remote code execution via maliciously…
CVE-2023-5246, published 2023-10-23. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. Authentication Bypass by Capture-replay in SICK Flexi Soft Gateways with Partnumbers 1044073, 1127717, 1130282, 1044074, 1121597, 1099832, 1051432, 1127487, 1069070, 1112296, 1044072, 1121596,…
CVE-2023-23451, published 2023-04-19. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. The Flexi Classic and Flexi Soft Gateways SICK UE410-EN3 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK UE410-EN1 FLEXI ETHERNET GATEW. with serial number <=2311xxxx…